CVE-2014-2292

Unspecified vulnerability in the Linux Network Connect client in Juniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE OS before 7.1r18, 7.3 before 7.3r10, 7.4 before 7.4r8, and 8.0 before 8.0r1 allows local users to gain privileges via unspecified vectors.

CVSS v2.0 7.2 HIGH

7.2^/10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10616	Vendor Advisory
https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10616	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:juniper:ive_os:7.1:::::::*
	cpe:2.3:o:juniper:ive_os:7.3:::::::*
	cpe:2.3:o:juniper:ive_os:7.4:::::::*
	cpe:2.3:o:juniper:ive_os:8.0:::::::*

History

21 Nov 2024, 02:06

Type	Values Removed	Values Added
References	~~() https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10616 - Vendor Advisory~~	() https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10616 - Vendor Advisory

Information

Published : 2014-03-14 15:55

Updated : 2025-04-12 10:46

NVD link : CVE-2014-2292

Mitre link : CVE-2014-2292

CVE.ORG link : CVE-2014-2292

JSON object : View

Products Affected

juniper

ive_os

CWE

NVD-CWE-noinfo

{"id": "CVE-2014-2292", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-03-14T15:55:05.713", "references": [{"url": "https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10616", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10616", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the Linux Network Connect client in Juniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE OS before 7.1r18, 7.3 before 7.3r10, 7.4 before 7.4r8, and 8.0 before 8.0r1 allows local users to gain privileges via unspecified vectors."}, {"lang": "es", "value": "Vulnerabilidad no especificada en el cliente de Linux Network Connect en Juniper Junos Pulse Secure Access Service (tambi\u00e9n conocido como SSL VPN) con IVE OS anterior a 7.1r18, 7.3 anterior a 7.3r10, 7.4 anterior a 7.4r8 y 8.0 anterior a 8.0r1 permite a usuarios locales ganar privilegios a trav\u00e9s de vectores no especificados."}], "lastModified": "2025-04-12T10:46:40.837", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:juniper:ive_os:7.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D4313025-3FC4-42DB-B18E-57EC5C566B74"}, {"criteria": "cpe:2.3:o:juniper:ive_os:7.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8ECD0F7E-715A-4C52-ACF1-EE7A7042B991"}, {"criteria": "cpe:2.3:o:juniper:ive_os:7.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B7F2DEC8-F096-4519-B194-2D1B0FFB8D0D"}, {"criteria": "cpe:2.3:o:juniper:ive_os:8.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "536AF492-C6FF-4C5F-A5DF-DA14DFE8A41F"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}

7.2 /10